Privacy Policy

Effective Date: August 8, 2026 (Last Updated: August 8, 2026)

At Neve Jewels NZ Limited, (trading as Diamonds Factory, "we," "us," or "our"), we are committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using this website, then you can be assured that it will only be used in accordance with this privacy statement and New Zealand Privacy Act 2020, the 13 Information Privacy Principles (IPPs), and other applicable New Zealand laws.

This policy is designed with an aim to inform you about the information that Diamonds Factory collects, the reasons why such data is collected and how this data is used to safeguard your rights when you use our website (www.diamondsfactory.co.nz) the "Website", to place orders, or interact with our services. It supplements our Terms & Conditions and complies with the New Zealand Privacy Act 2020 and the 13 Information Privacy Principles (IPPs), along with other applicable laws.

Note: In the entire policy, "We, Us, Our" refers to "Diamonds Factory” wherein "You, Yours” refers to Customers and Readers.

By using the Website or providing data, you consent to our processing as described. If you do not agree, please do not use our services.

Our privacy policy will be updated occasionally and the same would be reflected with "Updated" next to "Privacy Policy" wherever needed with a date of last update. We persuade you to periodically review this page to be informed of how we are protecting your information

Your continued use after updates means your acceptance.

DEFINITIONS:

"Company" "Neve Jewels NZ Limited" (or "we/us/our") means Neve Jewels NZ Ltd (Co. No.: 8361184) trading as Diamonds Factory, A New-Zealand company registered in Auckland, which is a wholly-owned subsidiary of Neve Jewels Limited (UK, Company Number 06453160)..

"Group Companies" means Neve Jewels NZ Ltd (Co. No. 8361184) trading as Diamonds Factory, its parent company Neve Jewels Limited (UK, Company Number 06453160), it’s fellow subsidiaries and any related entities of Neve Jewels Limited as defined under the Companies Act, 1993."

"Website" means www.diamondsfactory.co.nz and its associated pages and content

"Website Content" means any information, text, images, photos, design, files, software, music, sound, and video available on the Website.

1. Who We Are (Data Controller):

Neve Jewels NZ Limited (Company No. 8361184, GST 136176765), [4th Floor, Smith & Caughey Building, 253, Queen Street, Auckland, 1141, NZ"]. We are the controller of your data.

We have appointed a Data Protection Officer (DPO) to oversee compliance with this policy, New Zealand Privacy Act 2020.In case of queries, you can contact our DPO at data.controller@nevejewels.com.

2. What We Collect:

Personal information is required only at the point of purchasing an item or when ordering a ring sizer or when you sign up for the newsletter. Personal Information includes, but is not limited to: First Name, Last Name, Home, Billing or Physical address; E-mail Address; Phone Number & other Contact Information. We may also collect the following information:

• Demographic information such as postcode, preferences and interests (optional, used for improving services and targeted offers; if not provided, you may miss personalized recommendations).
• IP Addresses (automatically collected for security and analytics; no direct consequence if blocked, but may limit site functionality).
• Other information relevant to customer preferences, surveys and/or offers. (optional; non-provision means exclusion from surveys/offers).

We do not collect sensitive personal information (e.g., health data) unless directly relevant and with your explicit consent. All collections adhere to Information Privacy Principles (IPPs) 1, 3, and 4 of the Privacy Act 2020: we collect only necessary information in a lawful and fair manner, and inform you of the details at the point of collection.

We minimize collection to what's necessary as defined under Information Privacy Principle 1 (IPP 1) and IPP 4 of the Privacy Act 2020.

We state that we do to collect children's data (under 16) without parental consent IPP 10 and IPP 12, and the Unsolicited Electronic Messages Act 2007 where applicable.

3. Why we collect this information:

We are 100% committed to protecting your privacy and security and we totally appreciate and respect how important privacy is.

We will strive to ensure that your data is not used for any other than aforementioned by us or by the third parties engaged by us.

We require this information after you’ve shared your legitimate consent as per provisions of Information Privacy Principle 1 (IPP 1) and IPP 3 of the Privacy Act 2020 to understand your needs and provide you with a better service, and for the following reasons:

• To process the order and deliver products in a timely manner.
• To send confirmation and updates on your order.
• Internal record keeping. (e.g., order history; retained for up to 7 years as required by tax laws, or until no longer needed).
• We may use the information to improve our website, products and services.
• We may periodically send promotional emails about new products, special offers or other information, which we think you may find interesting using the email address, which you have provided.
  Note: Marketing communications require your explicit opt-in (e.g., via checkbox during signup). We use double opt-in for email/SMS lists to confirm consent. At any point in time, if you do not wish to receive further communications from Us, you may select to opt-out of receiving such information or email us on service@diamondsfactory.co.nz. Opt-outs are processed immediately, and we maintain records of consents for our processing and in compliance with the Privacy Act 2020.
• When you visit our Website, Diamonds Factory collects your IP address to, among other things, help diagnose problems with its server, administer and tune the operation of its Website, analyse trends, track traffic patterns, gather demographic information for aggregate use, and track the date and duration of each session within our Website. Your IP address may also be used in combination with your personal information for credit fraud protection and risk reduction. retained only as long as necessary for these purposes, typically up to 2 years; disclose any profiling and right to object under IPP 9.
• Before using or disclosing information, we check its accuracy as per IPP 8. We do not retain information longer than necessary (IPP 9), e.g., transaction data for 7 years per tax requirements, marketing data until opt-out. For non-essential uses, you can withdraw consent without affecting essential services.
• We comply with the Fair Trading Act 1986 to ensure marketing is not misleading.

4. Security:

We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.

In the event of a privacy breach likely to cause serious harm, we will notify affected individuals and the Office of the Privacy Commissioner (OPC) within 72 hours, as required by Part 4 of the Privacy Act 2020. We maintain an incident response plan and appoint our Privacy Officer to oversee breach handling.

5. Compliance With Law And Fraud Protection:

We may collect and disclose any information, including personal information, we deem necessary, in our sole discretion, to comply with any applicable law, regulation, legal process or governmental request. This includes sharing for investigating illegal activities, suspected fraud, or situations involving potential threats to the physical safety of any personal or as otherwise required by law. We may collect and possibly share personally identifiable information and any other information available to us in order to investigate, prevent or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any personal or as otherwise required by law. We may also exchange information, including personally identifiable information, with other companies and organizations for credit fraud protection and risk reduction.

All disclosures are limited to what is authorized or necessary.

6. Information Shared With Third Parties:

Third parties may use your personal information. For instance, when we ship the product out to you, we need to share your Full Name, Shipping Address with our delivery agent. Examples of other third parties that we may share your personal information will include: webhosting companies, fulfilment companies (e.g., companies that fulfil product orders), our group companies, its fellow subsidiaries (within and outside the New-Zealand, with appropriate safeguards) jewellers, assemblers, data analysis firms, affiliates, third party consulting or marketing firms and e-mail service providers.

Additionally, if you use a credit card or other financing alternative to place an order with Diamonds Factory, to confirm and process your order, we will share your personal information with such financing company.

These third parties only receive personal information if such information is needed to perform their function(s), and they are not authorized to use any personal information for any other purpose(s) other than the purpose(s) set forth by Diamonds Factory.

We only provide third parties with the minimum amount of personal information necessary to complete the requested service, product and or transactions and are contractually required to comply with the Privacy Act 2020, including data security and use limitations.

We conduct due diligence and audits on vendors. Non-essential sharing (e.g., for marketing) requires your explicit consent.

7. Data Sharing with External Partners: Adyen (Payment Processing)

To provide secure payment options on our website, we utilise the payment infrastructure of Adyen. Under the New Zealand Privacy Act 2020, both we and Adyen act as independent agencies that collect and hold your personal information. In this arrangement, we manage the commercial integration and website experience, while Adyen handles the actual technical execution of payments, transaction security, and operational fraud prevention.

When the payment gateway loads, technical data (such as your IP address and browser details) is collected as it is necessary for a lawful purpose connected to our business functions to ensure secure operations. When you make a purchase, your payment details (card data, billing address, and order amount) are disclosed to Adyen strictly for the purpose of processing your transaction. Additionally, Adyen may independently evaluate transaction details as necessary for its own risk assessment, fraud detection, and compliance with statutory financial regulations.

Under the Information Privacy Principles (IPPs), you have the right to request access to, and correction of, the personal information held about you. Because both agencies handle your transaction data, you may exercise your privacy rights or lodge a complaint by contacting us directly at data.controller@nevejewels.com, or you can review Adyen's data handling practices and contact them directly via the Adyen Privacy Policy.

8. Your Rights:

Under Privacy Act 2020:

Right of Access (IPP 6)- You can request confirmation on how your data is being processed, get access to the data, and also request details like purposes, recipients, retention periods, and automated decisions. We will provide a copy (e.g., in electronic format when requested).

Right of Rectification (IPP 7)- You can request correction of inaccurate or incomplete data without undue delay. We will notify recipients (e.g., third parties) of changes.

Right to Erasure (IPP 9 & 10)- You can request deletion of data if it's no longer needed, or you withdraw your consent, or if we are unlawfully processing your personal data, or If you have any other objection. We will notify recipients (e.g., third parties) of changes.

Right to Restriction of Processing (IPP 8 & 9)- You can request temporary "freezing" of processing of your data (e.g., marking data as restricted) while accuracy is verified or your complaint is resolved. Your data can only be stored or used for legal claims.

Notification Obligation Regarding Rectification or Erasure (IPP 7 & 9)- We will communicate rectifications, erasures, or restrictions to recipients (e.g., third parties) unless impossible or disproportionate.

Right to Data Portability (IPP 6 )- You can receive their data in a structured, machine-readable format (e.g., CSV/JSON) and transfer it to another controller. Such transfers apply only to automated processing based on consent or contract.

Right to Object (IPP 3 & 11)- You can object to processing based on legitimate interests, public tasks, or direct marketing at any time. We will stop these marketing or promotional campaigns, unless compelling reasons override (e.g., legal claims).

Right Not to be Subject to Automated Individual Decision-Making (IPP 6 & 8)- You can object to decisions based solely on automated processing (e.g., AI scoring) with legal effects (e.g., credit denial). We must allow human intervention if objected.

You can send a request via email at data.controller@nevejewels.com . We will verify the identity.

You can also send an appeal to the Office of the Privacy Commissioner OP in case of no response from us for a month.

9. Email This Product To A Friend:

When you e-mail a product to a friend, you and your friend's names and e-mail addresses are requested. This ensures that your friend will know that you have requested that Diamonds Factory send them an email. You and your friend's e-mail addresses will only be used for this purpose unless permission is otherwise granted.

10. Privacy Policy Mobile Messaging service:

• We value your privacy and the information you consent to share in relation to our SMS marketing service. We use this information to send you text notifications (for your order, including abandoned checkout reminders), text marketing offers, and transactional texts, including requests for reviews from us. Opt-in data and consent for text messaging will not be shared with any third parties except with messaging partners hired by us or the parent company, for the purpose of enabling and operating our text messaging program.
• Opt-in data and consent for text messaging will not be shared with any third-parties except with messaging partners, for the purpose of enabling and operating our text messaging program.
• Our website uses cookies to keep track of items you put into your shopping cart, including when you have abandoned your checkout. This information is used to determine when to send cart reminder messages via SMS.
• You can opt-out by replying "STOP". We comply with the Unsolicited Electronic Messages Act 2007.
• Explicit consent is required under IPP 3 and Unsolicited Electronic Messages Act 2007 (UEMA), with unsubscribe in every message (valid 1 month). We maintain consent records.

11. Business Transfer:

Your personally identifiable personal information may be disclosed as part of any merger, sale of company assets or acquisition, as well as in the event of an insolvency, bankruptcy or receivership, in which personally identifiable information would be transferred as one of the business assets of the Company. In such cases, we ensure the successor adheres to this policy or notifies you for consent to any material changes per Privacy Act 2020.

12. International Transfers:

Information collected on this Website may be stored and processed in the United Kingdom or any other country in which Diamonds Factory or its affiliates, its fellow subsidiaries or agents maintain facilities and by using this Website, you consent to any such transfer of information outside of your country.

We ensure adequate protections under IPP 12 of the Privacy Act 2020, such as contracts requiring equivalent safeguards. Transfers require your consent (e.g., via checkbox during checkout), and we disclose destinations and risks upfront.

13. Cookies & Tracking: :

We use cookies for functionality (essential), analytics (Google Analytics—consent via banner), and marketing (retargeting). Manage via browser or our tools. See Cookie Policy.

14. How we use cookies:

A cookie is a small file, which asks permission to be placed on your computer's hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.

We use traffic log cookies to identify which pages are being used. This helps us analyse data about webpage traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.

Overall, cookies help us provide you with a better website by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.

You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.

15. Links to other websites:

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information, which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question. Links are provided for convenience and comply with the Fair Trading Act 1986 (non-misleading).

16. Controlling your personal information:

You may choose to restrict the collection or use of your personal information in the following ways:

• Whenever you are asked to fill in a form on the website, look for the box that you can click to indicate that you do not want the information to be used by anybody for direct marketing purposes.
• If you have previously agreed to us using your personal information for direct marketing purposes, you may change your mind at any time by writing to or emailing us at service@diamondsfactory.co.nz.

We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law to do so. We may use your personal information to send you promotional information about third parties, which we think you may find interesting if you tell us that you wish this to happen.

17. Complaints:

We are always at your service, for any issue or complaint your may have with our website and our privacy policy. You may contact our DPO for issues. In case of non-addressal of your issues, you may escalate the matter to OPC.

Access, rectification, erasure, restriction, objection, portability (generally free unless unfounded; response within 1 month).

To exercise, contact our DPO at data.controller@nevejewels.com If unsatisfied, complain to OPC.

You can restrict via forms (e.g., marketing opt-out checkboxes) or by emailing us.

We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law to do so. We may use your personal information to send you promotional information about third parties, which we think you may find interesting if you tell us that you wish this to happen.

You may request details of personal information, which we hold about you under New Zealand Privacy Act 2020, the 13 Information Privacy Principles (IPPs), and other applicable New Zealand laws. A small fee will be payable.

If you would like a copy of the information held on you please write to Diamonds Factory- 4th Floor, Smith & Caughey Building, 253, Queen Street, Auckland, 1141, New Zealand.

If you believe that any information we are holding on you is incorrect or incomplete, please write to or email us as soon as possible at the above address. We will promptly correct any information found to be incorrect.

We Appreciate Your Valuable Feedback

If you have questions about this privacy policy, please contact the Diamonds Factory customer service department at service@diamondsfactory.co.nz.You may also send us your comments about the Diamonds Factory Web Site or the shopping experience in general, as we always appreciate feedback.